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(57)Abstract: 

PROBLEM TO BE SOLVED: To limit the transmission 
band of offensive traffic for a distributed denial of 
service (DDoS) attack while securing communication 
traffic for regular users. 

SOLUTION: When the suspicious offensive packet of the 
DDoS attack is detected, a gate device 2001 transmits 
the suspicious signature and the regular condition of the 
suspicious offensive packet to upstream communication 
devices 2002 and 2003. Each of the communication 
devices 2002 and 2003 cancels the transmission band 
limitation of the packet identified from the regular 
condition and a regular signature created based upon the 
suspicious signature while limiting the transmission band 
of the packet identified from the suspicious signature. 
Further, each of the communication devices 2003 and 
2003 transmits the suspicious signature and the regular 
condition to further upstream communication devices to 
report the suspicious signature and the regular condition 
to the upper- most stream communication device in the 
recursive manner and each communication device further limits the band by detecting the 
offensive packet from the suspicious offensive packets while implementing the band limitation of 
the suspicious offensive packet. 
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ciwst^s] y-hM2ooiti, d d o s mm<D 
immw^v btt&mrzt. ±«©a«asti2oo 

*B*fl s *ai«'r*o iMSB 2002. 2003 ti. § 

RTt*o ilDflSElB 2 0 0 2 , 2 0 0 3tf££U:±SS<DiSi 
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A Ni: s 89IBL AN*5cfct5*-y h7-*tOHtfMfSn 
T. 

fuE^— httBtt* 

iifl b 5 1 v ? eftteSaRfflB' v h <D& 

a*fr*cfi«f 5^5*^*^x <y * u 

±8StOBaieil«KB'\5iHi U 

ffiE9fl£cB(±* 

a 5/ ^ * ^ * K «fc o TSSSU s n § RSSH/ ^ -y h <0 £ 

[§it3<S2] ttE^— httB&tfMEiSBSBtt* S9 
Egg *> 9*** T«B3U« tl* Sd»6*> ^7hOh7 
fc -y * L T«S b v * * *ttfch U iMEScB b 

s»y<-5r v b ©easts*** &KW«^r*»ai*ff i c fc 
*ft*±a<oji«atB'Nis«"r*i:«K:. mEjEa*ft 

£ flQE&H ^ ^ £ *c jE«/^-5r *y h *«K3»J"r £ 
fuEIBI'> ^ ic J; o TBH3U 2 *i £ jE^ ^ 

§fl LrcH3IHiE^f*^±S60iifgKB^aSfl-r ^ fc« 
^7 b*MBiJT3IE«S'y*^**£jau 

MB** 5 ] K8«D9flSeB«:» § L T ft 5 

A N t WJtC^JiTi^nrcy- bSKHfclS^T* 
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2 

bttffiftfflEtBSBi:. 
ArtSftSilfi/^-y b*^x-y*U fl!E'*5r-y b« 

aftfrEwawEtBT * ^^sis/ ^ y h o«im*ff * 
nuE h 5 1: -y t ^M^mc * o retm* tirzwm&mm 

miESS > y * * #±8it<aiI{IgB &c *f L T iM{if £ 

* n *. * c <b * w» k -r * h ^iSo 

«tEa*8»^*-y hOh7ki7^^MLTi«h7 

iaE»«MW^Stt, buE^« h7by Z*mj&?Z>^ 

^y h^-^A^aim^nSiAS^^r-y hOfc^i^^ 
20 5tc»JH-rsci:*Wai:-raBI*«5tEKoy-F 

7 ] ME/^ v httUftfrEtttftt. « 6 

^r«y hT«**ft*STIEa*ft«:E«L. 
HuE^^^+^^g^. MfESHS/y^^-v fcME 

HOE*«IBiJW#®tt, MEiEJHi/^^-v t?«fflU* ti* 
50 iJE*>y*^-viS«#Stt, MEiE«jfeft*HSE±aiO 

a««B*c»Lrai«r*c fc^wia^-rsM^ss 

8 ] KdMft-pfiS Ty^a-mtfLA 
N ^y- h *B«r ^ L T»«S tifc * y h 7 — * 

MM** 9] A**ti*mEaWS»/^^'y hOF7 
t -y * £:##t LTi^S h v t -y ^ ^t^) h ^ t: *y ^ 

S9E»«»J»#St±. MEftS h 5 H 7^5:ifiit5^ 
^ y h£DiMttl7C^'y — ^^LT, MEaittJTE* 

*y h^-^^einmsns^ffi^^'y hoEi^j 

50 So 
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3 

[ii*3S i o] mmiyf^^^mmm. SuisTSt 

riMBW«SHIP#S(d: , MEIEaftft £ MESH ^> 

WES/ y**- -v »«¥KCi. hiBEIES^* Buia±8SO 
*«9KE»0H{I«Bo 

GWjRSU 1] «»©HD««B*IHIlttfcffi»LTS: 

-J ft, 

ifu f ESU v TIBgiJ £ n S / 

- Vf X^ftE^*BS±r n ^5 A 0 
[11*311 2] P^WmT^^^>tfn.--^^J:lJ : L 

/£"f 3 iHIKB-fC^fr en^^yea-^yn^L 

fciEJWfcftfciftWrsxxy^i:, 

hu IE§^ > y * ^ * TSSgiJ £ ti S ;^7hOE 

asm** war & xf-y^t 

jejs-> y * ^ -v r-Kgu 2 n a iejs/ ^ -y h <o eaifflr jssj 

PS^K-r^X-r^yi:. 

HaESB^y^^^fcHttEiES*ft*±SKcoii««B*c 
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§ ^7h ©£as»«* £ e ic mm? & x -r ^ ^ 

lan t<op^tc^ff stifcy- hsiit'^^nsn 
ho*uj*ftK:*a-r**>s^*^x'y*'rsx7 L 

7^t 

^■^L/chv^-y^^^tBL/cil^^, «ffi<*ftfcmrE 

^*tt»&nfciE^ft4:«iESH->y*^+*»K:jE 
S^7h £rHKSU"r S IBS ^> y * 3- -V £r£jS"r §Xf7 

mm?2>7sTv7t, 

30 IJEa*ffli/^ *y h o h 5 ti ^y «:^«f LTS» b => 

?*tf>m?z>x7-vyt, 

ftaB&9b?\iy9&mi3L?Z'iiry boXMm^y b 

sas/^y hoeai« : «**6ii:ejiB'rsx-r'yy 

O^jailil^ ^ > if ^ - iS? tc^T^ -SS ftiftm -9— Vf x^F 

iMiasK^yci^^ftEak-rsckftwaifc-rsEak 
i&? z> mmmm± vm=s snsay^a-^^nm 

TSSoy- h SS$> ^> u Hi3i(ifiB/)^S® > * v 

£ IBft^ft ^m? Z> X x -y -f t . 

fiaE8»'> * "WHIM* tiSft»SH^^-5r *y h OE 

BuEIES*fthHuESg^y*^-\^^:S(ciE^^^ 

h*wsj-r*iEa^y*^-ir*saL, weeks/ 
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[0 0 0 1] 

Cf8W0>Jl-rstStB»»] **y h7-^cfg 

[0 0 0 2] 

KE3R<DBtffi] B£S5. TCP/ I P (Transmission con 20 
trol protocol/internet protocol) ^If^'y h7- 

m<omm b^y* cr-zm) miiim-/^ 

U:5M{rt£C£:U:J;oT. *«y h 7— ^ OfiiSflW^it 
-/WjR«*?B*UTjESftfiJffl#<03pJffl*ft5tf J: 9 4: 
IfXT^* (OT, TDo S (Denialof Ser 
vice) ifc^j trfcVf) *Bfi<*c kti*iSSnti/^t\ 

MftHffifr&raWfcMSLTDo S 5 
rDDo S (Distributed Denial of Service) 

[0 0 0 3] COD D o SIj(iiC^t§P^l(D^a^ L 
TW\ yX3tt«L/c Ingress F i 1 t e 
r (RFC 2 2 6 7) t U U N E T %±<D C e n t e r 
T r a c k^feSo #U#te, DDo S St*C0lHtCft < ffi 

t> n & isfflTc r k L/7 oirpft* * x *y -f % ism v & 

TiMft£ft£>'^y bOiMfiTtT F UXOiESEtt«:¥-x 
■y*U n-*;bxU7^7 h 7-^CfUD MaT £>n#: 

[000 4] Sfc, DDo sa»*ambfc>/-KJ:0 
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6 

S-tr-tiX^^OK±^S (W3H2 0 0 1 -2 7 4 
0 16). AT&T*±ife:fc (R.Mahajan, S. M. Bel I ov in, 

S.Floyd, J.loannidis, V.Paxson and S.Shenker: "Co 
ntrolling high bandwidth aggregates in the network 

- extended version" (2001)) „ T D 1 P (Intruder 
Detection and Isolation Protocol) (D. Schnackenber 
g, K.Djahandari and D,Sterne: "Infrastructure for 

intrusion detection and response" , Proceedings 0 
f the DARPA Information Survivability Conference a 
nd Exposition(DISCEX), South Carol ina (2000)) 
tffc£o AT&TttifcSc&tfl DI Pit iA*»a-r^ 

* ^Sft IT * ^ *y h 7 -f U 
D^Ate. fnfnDDo Si*S#0*Xhfr£>*M? 

[0 0 0 5] 

C«W*Wl*LJ:5fc"r5SIB] ±»Lfc Ingres 
s Filter (RFC 2 2 6 7) ^ mimfLT K U 

Ktis t* $> 0 . 3K**stt s w-r s «> ic ffi 5 aw 

-m&t^o ^fc, Center Tracks. 

[0 0 0 6] 2 6tC. laifclngress F i 1 
e t e r (RFC 2 2 6 7) (4, ILtM P (internet 
protocol) r KU-X^iMfijctCJ&oTV^ I P/VJry 

Ti^n-^^x'J7^7 h7-^t^^^-^^ h£ 
<0*#Vt**5;l/— £*C Ingress Filter*' 

ft^fct^B8Jfflj£*«&So t/c. mftCen t e r 
Tracks »»ffiBr»c»tt^nAc»»gaD o SO 

[0007] sfc, couMonRn*«^uMgt«LO 

^^tl/-cJSttO^T*ijc^^*y 



7 

&m<Dffi±fii£* AT&TIi^&D'I D I PtC&Tte, 

Ttt»LTLS5oH£tt#*!>, IE«*iJffl#<D3pJffltt^ 
MBtfftS. 

[0 0 0 8] *5EMW\ ±EW**#*LT*;£ftfcfc 
T«-ar«***eWLft*<6±SKy- KT'DDo Si£g 

[0 0 0 9] 

el a N$s&xf*y h7- ^coibhcm* stifcy— 

<ry hO«tffl*fflc§at435p5**f x 7 > 

Lft h7 1 7^^L/:«^:, «msnfcfiOE«S 

SH/ ^ -y h SriBS'J-r 5 5/ y**- * L T±8K 

ffl«a^a«r * mesh y**-* ic^t 

[0 0 10] W3cflS2«cE«OJ4flH«4, SbRQU t^eaiBc 

h umimmmmtz , m ess ^ y * ^ * tikbu 

7t7>*ttttlU MEM^^fcy **«j«-rs^4r 40 
•y hOSffiTE^-y h7-7^LT, UfSlWEiSSlHTG 
*y b7-7/)^ilii^n^»^7 HOCaSttW* 

[001 1 ] m&xstc&moi&iitt. 1 sfcc* 
mm\ 2 k:e*w>#rsw— ^x3F(nasiB6±>srffiT»* 

oT. WEy-httBtt. IEJg?iJffl«0«8*»B^e>0 
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su sns Est / ^ *y h oGiM WJasjE^nm-r 5 SOS* 
tTi\ noEimaBc*. Taoy— h»B*fctta«it 

H*^6iMLfcMEiE«ftff*±»OiiB««H^3aMaT 
£ i: 3± ie „ mlEjE«*ft 4: SuESii > V-^tZ&lz 

fiOEIESi > ^ -v tc £ o TMBM 2 ti £ IEJS' y 

[0 0 12] 11^4 KE*OJB!Btt. ISaRiI 1 HW;R 

±^Ti*T*feoT. h7- ^±T*i&f^-r^ 

[0 0 13] l»5R«5*cE«<0«WJtt. ffiSiOiiDfig^ 
^@ttlcgiLT35:5^ 7 h 7~^ B&ffllfcffeT-fe 

-y h©«ffi*ft*E«f *'*!r-j/ h«m*f«2ttgpi:. 
A^/^ti^jlfl/^^y h^x7^L, 8uE^y»y btk 

a*ftEB»««EiB-r**»tt/^y Ko«m*ft* 

S^^r>yh €rfiSg"JT s ^> 7* * -v ^^^-r 5 > 7* 
H9E§IS^y^^+«:±«t05ifISB 

[0 0 14] »5R3K6JcE«!0»Wtt. 5 tcIS^ 

* 2 n 5 Ruiai^^S^I^ ^ -y h CD h 5 t: y ? L T 

a»h7ty«(ttiU WE*«SJW^gti. liTEft 
'^h-^t^y^^^-r^/^^y hO^mjCT^y 
*1t£Lr, fiuE^Tt^^y hy — ^Tb^iMttl^n^ife 

[0 0 15] M#ffl7«cEKO»qUCd:. M^HSS^Cd: 
lf5l<JS6tcE«cOy-h^BT**oT. H5E;^y 
"fflftfl=Ett«*i. ^6^. ffifi/^y htfiEmwm%<D 

*EtBL, ttES/y*^irflfejat#Stt. WESlS/y* 
fcWEiEa*fti:«*»CiE«/^^ h^l^J-r^IE 

s/ 5=- * r-mm ie^/ ^ y h o eat »iat*jis^: 

»KL. HuE>'^7^^iMfl¥©«, ffi[EjEa*ft*M 
E±8it<oai««Hlc» LTiMfl-r -5 C i: ^T^ 0 
[0 0 16] S»5R^8^EK<D«W(i. IKWWftTfi* 

nft*^ h7- <>%ffifiE-rsa(i^(c4oi.^T, Tiso 
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mm¥>® t . z m * z c t % vm t -r * m 
[0017] mmm9iam<D?£m&, m^s^m 

[ooi8] nwmi o^iB«cof£Bjjti. m^msztz 

ft fc iiuESg 5/ y * £ 1EM' W y V teffiffl* 
S iEffl ^ + U MEIESl > ^ * ^ -v TittBU 
StlSIES^^y hOgaSflf«HiiJH*fBI»L. MES^ 
*^ + iS«*att. MEIERS' y*^**METi«©il 

[0 0 19] »*rgi l lcEKOJ8ftt, ISftoailS 
B*»@ttfc»«LTa:**-y h7-*4:. tomt»T* 
— 2te£Ul AN £(DmiCft-WZ ftfc?— 

ffl«hft fiMe&ssK' ^ *y h *»j-r s §m > y * ^ 

ESS > if* ^ ttmc JEM' SrIKS'J-r £ IE* > 

y * §Xf7^t h&ESK ftt* 
K8U 2 n S SWI/^ <y h 0£5M«Ja*S»]lfi-r « X t- 

MEiEglAft *±»Offl« ^iStc iMfl-T 5 X -r «y 
Sh^fc-y^fc^ttrrsx-r-yri:, WEiWh^fci-y 
mEj5Sfll76*-y h7-*fr5Sffic*ftS&S'<*-'y 

eat»«*«6t*jia-rsx-r-yyi:. e^ve*-* 

[0 0 2 0] 2lcE«W)J»Btt, R6fflJ«»T*S» 

t^xf77 J ^, ME«»s/y*^^"easBEPj*n*av 

SH>^>y hoeiM^^HRg-r^X^-yyh. UTiEIE 



(6) mi2 0 0 3- 2 8 3 5 5 4 

/0 

«*ffkWE*»s/jr*?-+i:«»»cjESI/^^ httm 
BTraXx-y:^ BuEggv-y^^^^HuEiE^ft 

-^^e>M?n^»^7 KoeHiw«**6tc»j 

[0 0 2 1 ] n#QI i 3«cE«0«flH«4, ?gS(OjiD(IS 

h »B±T?»tS ^ > tf - # y a A «rEfi L 
^ n 5 51 (I h ^ t: -y ^ 46ft 46 & tl StSS^ / ^ <r -y 

«Xr7yi:, : f46»466tifeiE«*fl i ^«IESHt/ 
y ^ 7^ ^ ^ fittclE^ ^7h £»JT ^> IE^ > ^"^ ^ 
^i^-T ^> X r- ^ 7° i: , ME8H ^> ^ * ^ -v T*f W5U * n 

»eie»'> y**- -v -eaiBjij* h« jE» <y .y h oga?ff 

«*J H*»l»-r i)Xf77 J ii, tut v 7^ + 4: S9 
IBIE^ft^±^ilfi^HtciMfir^X7"^y7 0 ^. hu 

30 ^y^^dti-r^X-r^y7 P i:. WEa» h ^ t -y * *«JSE 

Tt^-y h7~^^6^Hi^ti^ij(i/^7 hcoeaiffiiS 
^?f)WJPIf§7f 7^i:> <D«*l^JV^a-^ 
tc^T^^^»&^-^X^i^^±ya^^A^ 
f BUT ^> C t T * ES««*T ^> « o 

[0022] maun \ 4 tcEisonwu. 

•tZXv-v-ft, «fEfflBS/y*^ + T«giJ*n*a» 
g^/^-y KOfi£aSW«*il3JPH-r SX^r-y^i:. MEiE 
4: MESH ^ * * * £ ttmK JEW vhttM 

^ § iE«2y ^7ho eat w«a9JB« WK-r ^xf 

77i:, MEfflBS/y*^+fc(BEiE»feft*±«[oa 
{i^»^iM<i-ri>X-r*yy4:, buE^SSIS^^^ hco 

-ft. MlEaSth7ty*«:IB*t^^7 hOiM*^ 
50 ^7h7-^^fifSU SuEiltbTc^ y hy-*3b^jM 
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// 

CO 0 2 3] 

T, 2000(i1t-A, 2 0 0 1 ttcs>JSW<o— StfiBE 
JS^ctSy-hKIB (y-h^x-f) . 2 0 0 2-2 0 

2) . 2007 — 201 0(±8^ifft5 e DD o S 
2 0 0 OtflRSSft-CVSL A 
N (p-*;l/xiJ7^7h7-^) te. y-h8!2 0 
0 1 *Cj;oT^»0**y h7-**c»tt*tiru>* 0 * 
IT, **y F7-^teiffifi^Sl2 0 0 2. 2 0 0 3. 2 
0 0 4. 2 0 0 5. 2 0 0 6^LTl/^o DDoSS 
StlC^otlff^ n/cK8l2 0 0 7, 2 0 0 8. 
2 0 0 9^ Iftm'^v h«:«ft»#0-9--/^2 0 0 0 

2 0 0 1 (0«aa*fB»LTLSl\ DDoSSJtfcfi 
Jffil3BaftjEffl«ffl«©i!B*2 0 1 0A>6-9— /^2 0 0 0 

[0 0 2 4] y— hmW2 0 0 Hi. 0 0 

H 3 KiE3H*ff<0Rffi©W**-ro y 
-hSil2 00 1fi. PmW-A2U0UM^ 
-/^2 0 0 O^lRS^nTl^L ANOHffW#K:«fcoT 

[0025] H2tcfe*t*a®sM*aj*fl=«, tfetun 

14. ttmH«atfttffiHI«oa/P6ia:S3ffl<OUa--F 

»«tt«B!ii:tn6jiitt«oa*«s-r*««, 31 3 /as 

ttT'SS I PO TOestination IP Address tf\L9t\ P7 
FUX) J kl/^JBtt«B«Jtti&rfi£*tl*o 

<^T. *#10U3-F©tttB«tttt, TOestination 
IP Address I P7FUX) J H92. 168. 1. 1/3 

2J T*$>D (dst=192. 168. 1.1/32) . I PCD±{£/g (S 
4/1) (O^a H37l/«8U*S"r Tprotocol C/n h =3 

;U) J TTCPJ (Protocol=TCP) . fro. ^ 

fDestination Port ($&9ttf— h#^0 J # T8 0J T* 



(7) M12 00 3-2 8 3 5 5 4 

12 

&Z> (Port=80) £^5mVE.Mftlt : £ftZ>mm&<Dmv 
Ji^StiSo **2(0U3— K*tUHtt(±, TOestinat 
ion IP Address {$\L9b I P7FUX) J H92. 168.1. 
2/32J T'*0 (dst=192. 168. 1.2/32) . fro. TProtoc 
ol C^nhznyl/) j fr TUDP (User Datagram protoc 
ol) J T'&%> (Protocol=UDP) t ^SJHttSBiMi: ^tl?) 

Ritffioia-ems^nSo ^fc #^3ou^-K^tB 

JBttfcL TDestination IP Address Gfcft I P7KU 
X) J fr H92.168.1.0/24J V&Z>m®LMft\t t(DM^ 

io fifi-esaisnso &m«Hifiii. rauun— f-c»S!**i 

[0 0 2 6] H3K*»*jE«*ftM\ IP/^^hO 

sg 3 / 4 jBSttasu t: n 6Htttt<oa^ a * «»<o 

•y FtfjE*Wffl*<Ofl»5Rttll3b>6<Oy«r-y hTSS, T 
tettlEM^'rv hTfe^T^O, 82(0 

*fftc-&Scr^«&«iEM^yy FfcipJBr^nSo El 3 
tcJsi^T. 1 <DUa— K<D«ltHJBtt«> I PO TSo 
urce IP Address CMiEfb I P7FUX) J fr f"172. 16. 
10.0/24J -U&ZCt*mj£L (src=172. 16.10.0/2 
4) . #§2 0l/3-FO«tHiHttt I P±0"9— IfX 
J3iH**-r TType of Service (+r-lfX*-f 7) J fr 
TO 1 (-s^^-) J t*$5Ch4}§SLT^ (T0S=0x 

<o3Ejs*\ B8ai#aaif, ww»»oij— ^^2 o o or 

30 rJ+T— /*2 0 0 OtfiRS^tlT^* L A NOF/TW#frIE 

prF^w^n^o 

[0027] ^/c. hgi2 o o i Rirmmmm2 

0 0 2~2 0 0 6(i. ft*SB^<r«y FOFv^'y 
#*tU ^iEh^t'y^^^m-r^/c46^iEh^li'y 

t: -y ^/^-Vtc gr^L/cti'&lc. ^ZEF^h: »y ^T'^ 
«i:BII2ti«. l^4 0S^l©TiEh^t-y^^ 
tt. rfcjg^T lKbp sJa±^^y^y h^Sl e?u 

ITt^o ^/c. #^-2 0^FiEh5t: y^^f*^, rg 
iMffilST 2 K b p s W±. a3iyuh3;l/T'65 I C 
MP (Internet Control Message Protocol) ±coxn 

(Echo Reply) ^y-fe-5;(0^7 h^S 2&« 
±iiEScjMf3^nTl^J h^ti-y^^^->^ 
50 LTl^o #^3C0^IEh^t:'y ^^{^{^. reiM^ 
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T3Kbpstt±, f-^^gt^/cj6;^7 b\z<£ 

[0028] cct% y-hgi2o o i Rtfmmmw. 

2002-200 6ft^^«?S«MlBI^-r;l/«:KWr 

xsmmmmz 002-200 e^d^^^^ju-t^u 

/J*tlfc/^!y h*JEffi<?77s2 0 2 2. gg^77 2 
0 2 6, ^IE^5>X2 0 2 4<0 3O(0^7XtC»S"r 
£o &*5. CCD7^;U^ 2 0 2 1 QiMKTVl/dT 'J XM4 
^SE-rSo IE#t^5X2 0 2 2«r7t^h^7m 
0, Ei^7X2 0 2 2tc#«<**irt:/^y MilESi* 
n-2 0 2 3Ko&tf*u eai»«**JI8-y:"rtcffi*S 

n£ Q §^7X2 0 2 6tt^n/c^^7b(t k 

!3Uttii<D+J-— 2 0 0 Oj&UV— ^2 0 0 O^iRS^tl 
TV^ L A NSlCS4t58S+a- 2 0 2 7 tCO&tf 
ft, R61B3t*0-9-— A 2 0 0 ^2 0 0 OtfiR 

S£ftT^3 L A NOmYf#t ^oT^SXE^tl^cfi 

awwwHffl^ta^eaiww^sijHsnso -9—^20 

0 O^rilX^LTi/^y— hgi2 0 0 1 <DBM^tzj.—(D 

&mm^LMmi\Ui r ±mwn^<D-^—^2 o o o&w—j* 

2 0 0 0tfl|£§£ftT^£ L ANOfiffW#KcfcoT^a6 
IS 2002 — 200 em TiSt<D;U— ^^6*flLfc 

fiK£o^Ti±«arr*o ^re*^* 2024 tc^a^n 

fe^^yHi. ^iE+^L— 2 0 2 SCO^^ti, -9— 
[0 0 2 9] Ifc^T. y-h8!2 0 0 1 &tfiI<I3£B 

2002-200 §mKmmmm*'$kftrz>tc&b<D, 

7^^202 io»ar;U=fUXAU:o^T8lW"r 

& 0 f-VmmZ 0 0 1 ^0 : il{f^S2 0 0 2-2 0 0 
6 14. Aa*ft*±T<OBHI><<!r-y h%CC0»^r;l/ZJ 

[0 0 3 0] m§&y>()l>9 2 0 2 1 KfcM'Sfl'ST'/U 

£t\ Xf7yS 30 0 llCfcl^T, 
7^M2 0 2 Hi, bifiJEMf?* 

»&tctt. ^-y M4IEfti^X2 0 2 2(C^n5 
Ur7 3 0 0 2) o CCT\ lE^v^^lC^ 
3tL%frr>tc.m&lZXTV 7 S 3 0 0 3tcll^. /^y 

^-HC^StL /*5r-y M4TIE^X2 0 2 4C 

ft^£ft£ (Xr'yys 3 0 0 4) o ^IE~>y*^*tC 
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&aift^o/£itliXf77S 3 0 0 5tcil^ s 

•y h^Sa^^^-^-efeS^WWrL. ggy^^t 

(c^rncim^^x 2 o 2 6^»iHsn (xr7 7 

S 3 0 0 6) . SMv^^-WC^LS:^ 
±T<Dis?%^*lC&&L&^m&lZlZJEm2^*2 0 

2 2'\ftmZt\% (Xf^y^S 3 0 0 7) 0 C<D£5iC 
LT&tr^AlCftmZlntc^'rv bit. iEm**—V2b 

io fimmmztir texts n&o lEJss/y**-*. 

[0 0 3 1 ] #IC, m 7 <D¥- bmm 2 0 0 1 eOS^g 

ilfl^M2 0 0 2, 2 0 0 3O^*^i-§fi8#(0»ff 
^^-ryn~^-v-h^t/^19C0'7 J? -h^lS2 0 0 1 & 
t/ilflSH 2002 — 2006 <WFIE h7^7 ^1$tfc}Bf 
comi^TT^yu-^^— b^mmLX, DDoSSS 

20 [0 0 3 2] B70XT7yS 3 0 11 iCfc^T. y— 
H8I2 0 0 1(4. ftttSSttUftfl: (0 2) tCt&o 

i&mMre}m£2ftT^^ 

tk&mmc£&?Z> h^fc*y*£^x-y^U 3*§ 

COh7by **«C«SK h ^ fc -y £ LT^tbir 3 0 
Xf 77°S3 0 1 2^*5^T> co&tti-zntc 
h7t *y ^*Wc LTt^3S*Slifiim^ffCD 

JO £c SS^y^irtt. iiii§ih7k:7^Mll/^ 
•yh, t4bt,ij(i§i/^7 h^lS^'J-r^c ^^>tc. 
iE^fett (B3) *#!HL, iE«jfeff^TOUa-K 

frZTEMz.— Wmm'^ -y h T^^IE^n 

3 0S8^fW«:ffll/^TSiW-rs^, B2lc:fctt<5S*§- 1 O 
b 3 - H Jn^7K7)§g'> y * ^ 
(4{dst=192. 168. 1.1/32, Protocol=TCP, Port=80}i:^: 

40 0. m3^^JEm^^^^-^H{src=M2. 16. 10.24, dst 
=192.168.1.1/32, Protocol=TCP, Port=80}^tf {T0S=0x 
01. dst=192. 168. 1.1/32, Protocol=TCP. Port=80}^^ 

[0 0 3 3] Xf77 fl S 3 0 1 3£:fc^T. ^ 

— hg!S2 0 0 1 (4, Xf77 s S30 1 2tC*5t^T^££ 
LfcSa->y*^-^&aiES^y^^^€:7-i';l/^ 2 0 

2 0 0 0M'^-^2 0 0 OiWESStlTt^ L A NO 

50 i£*fc\m? Z> rz^<Dn^ 12. - 2 0 2 7 ££/£-T i>o 
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0 2 1 (DftM7)\szfVZl±lc'i£-DX, S«^**-*K: 
[0 0 3 4] fit, y-H8i2 0 0 1 li. 7777* 

s 3 0 1 4**ff-rs 0 t&fc>*>. y-hgi2 0 0 1 

W»JH«i:*±i»<oai««ll2 0 0 2, 2 0 0 3tCiMft 

w««ai8Mtt. y-h«B2 0 0 1 tfaatorrs 

[0 0 3 5] SHS^**-** IE«*fl=atfa* 

§^^7 h0^iDc^JPl{iO§:{iBt(r)il{i^B2 0 0 
2. 2 0 0 3 0Blff*W3«o B8©XT7^S 3 0 
2 1 tCfcl^T, 31ff^ffl 2 0 0 2. 2 0 0 3 it. ?~ V 
££B2 0 0 1 tfiMflb/c (XT77S 3 0 14) S^~> 

{,rr* 0 "Tsi:, xf7^s 3 0 2 2tc43v>T. mmm 

12 0 0 2, 2 00 3te. SflL/cSg IE 

«*fr*«juiEa->^^-v*3£flE-rso -b, IE 

0 2 3 Kiffi^ iffiflSS 2 0 0 2. 2 0 0 3 ti. Sfl L 
fcSS f-tMltiiL fcIE#i v * ^ -v «: 7 -f ;l 
^ 2 0 2 1 KS&U SR->y***&tf&SSJ^$- 
■y h <D h ^ fc >y * oe2S«i«iHI8fBic»fS L fcSH* n 

SBi : e-r;l/fcEi6tcS-r7-<;U^ 2 0 2 1 0»I7;baU 

•y ho£asw«oJMHfc, iE^y*^^rc*a-r«jE 

T. Xr77 P S 3 0 2 4(C:fc^T. iifl^B 2 0 0 2(i 
*<0±«lK:**ai««B2 0 0 4 tC. ifliA«B2 0 0 3 
ti*t<0±8iifC&5aHi^B2 0 0 5Rt/2 0 0 6tC^fI 

ilfl^B 2002. 2003 §{1 Lfcfi&W 

[0 0 3 6] fit, 9«iEB2 0 0 4-2 0 0 6(1 
fflfI3£B2 0 0 2. 2 0 0 3fr£:g£|vy*^£:IE8t 

ilfl^E2 0 0 2. 2 0 0 3(e^t^Xf77S30 2 
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1 ~ s 3 o 2 3 tmmicmitrzo 

[0037] ^c. f-hmw2 o o i Rummmm2 

002-2006 CO^FiE h 5 £ -y ^ttaB*<OSifi^* f TO9J 

•r^o i9^7f77s 3031 tcjoi^T. y- h^B 
2001 Rumm^m 2002— 2006^. ddos 

<S4) O^rnft^/^ — >lc^grTS h^H-y 

^m-r^o -rs^. y-hgi2 0 0 iRummumz 

10 0 0 2 — 2 0 0 61*. 7r7ys 3 0 3 2*C*5l^T. C 
0«m2nfc^IEh^fc'y*&# (B4) ^g§/c-t/^ 
*y bO&flTE I P7 7 KUX^iET KUXSSHh UTS 
allL. CWjEZKUXlEBBTfit). fro, gMy^ 

Lty-hgi2 0 0 1 &tfiI{f=gB2 0 0 2 — 2 0 0 
6ti:. Xt77'S 3 0 3 3tCfe^TCWEy^>f t 
47-rW 2 0 2 1 CIBt5o CtUc£9. U5(C^ 

Tm^y^^^iieic^r^^yi/^ 2 o 2 i^s 

T/baUXzacftoT. ^ IE > 7 % 9- * T* H ) J ■ J £ ti 3 ft 
[0 0 3 8] i:c5T% U±BtfflLfc»fNi* WTfciB 

[0039] wt, HDS*#EaLcof8«j<o— isasjBa 

So Ell 0*±, *HiSfBSB^Hff}l ^-TS^^y hV-^co 

WfiRTfcSo mi otc^fj:^^. mm*v hv—? 

taaoiifi«S7 o o i i:j:otgi$nn/^a 
fit, iift^H7 oo \ici$ \ i5&rci±m?&i3<DzL- 

*f(DZi>¥3_-Z 7 0 OQ&mtfctZCtWT'ZZ&o 
30 (C&ot^So a-ifO^y^a-^ 7 0 0 OtSSPIt* 

^^y\^zL — ^ 7 0 0 O^flL/c^y^y h&mm^v h 

y-^±osy-Kn:fflg-rsxifi^S7 o o i 

yt^a-^700 otc^ttsic^tc-r^o 
[0040] ^tc. mmmm<omm^D^xmmt^o 
m\ nt. mm^mi o o 1 ortgpos^^-r^n^ 
trmx'&Zo m i i tc^-r^tc. ii{i^B7 oonc 

tiilKiS 7 0 2 4 a . 7024b. 7024c. 702 

40 4 dtfJfSt^ftT&D. fflfISB7 o 0 l lien 5<Dil 

17 0 0 1 iCti:. ±Eoaaffl»7 0 2 4 a-7 0 2 4 
d fc*tf5Lfc>f ^7i- Xg|5 7 023a — 7023d 

02 1t /^-y FOKaiOH<0(ea6jtOHt««:iSia-r 
5ESftf-7;l/7 0 2 2 i:, 7^t^7A^>v Ktc^t 

(Act iveNetwork Execution Environment) 7 0 1 Oh 

50 Tb^ttbnri/^c rtrT^zr^vby—t^n 
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St#7 0 10(4. ftmc. 7^f^73-F (7p^7 
A) *^T^£fcfcO:3-F^lfirfi&7 0 1 It, Z^t- 
>rr3-F«:8BtaLTi3<fei60n— K351Sffl7 0 1 Z 

[0 0 4 1 ] CCT\ Bl I^#SBLWe>, dtOiifi 

M7001 oi/jf^ijcoffi^^f^-r^o BWST3<i!i<o 

iifiS6K^&iHHa7 0 2 4 htfiijii 
tSt, ^>^7x-X^7 0 2 3 dtf^O/^.y h £ 

Sd Utoiaisasap 7 o 2 i tcigfo e2ti&aas7 o 2 1 

fl7t (source) T VU7.t^H9€ (destination) T F U 
XfcfcR^ffiO, 5 ^z^nh<DT K U^^r^-i: IT 
Itejgjte^-^l/KBW? 0 2 2tcKtt£nT^SteiS5te 

[0 0 4 2] ;^y F^<0»ffltt*:# < 2il?)tc»Ct& 

T'^Sii^tC(i. C)Mffi9!ffi7 0 2 Hi. ^-Q/^y h 
^T^y-^f^y h7-^il7li7 0 1 0(cijfT o r 
fr4~7*v by — t&ffWm 0 1 0(C*5^T(4, n 
— F3tfr»7 0 1 itf^cD/^y 
3r-y HcttbT^fflT^T 7 ^^ 7=3- K^=i- FIB 
«SP7 0 1 2^51*fflLT*fiftSo ftfc. 3— FH 

957 0 2 ltc«LTflkoa««Wc»LTlEai-rsci: 
C7^f^7=- FSaflHTf S (UiOIejMSE (c 

feisrs^feorfesig^iitt, i£a5jaasp7 o 2 1 

(4. aW4!EiJijfeK:J*J6Lfc>f >*7x-X« (7 0 2 
3a^7 0 2 3 b^7 0 2 3 c^:if) (CiffiU ^(O^l/ 
^7i- XglWafSSg (7 0 2 4a^7 0 2 4 b^70 

2 4 eft if) ^LW7 F*fttcoafi^B(c»E3M"r 

[0 0 4 3] ft4b\ d CT'(4ilfl^7 0 2 4 d^LT 
flk<oa««Bfr 6^7h *<£J» L tLTR 

[0044] ^tc. iiff^g7 o o i rttD&iMiGJian 

=i— F*aJBTS*\ #Jffi£teoafifiB£«Earrs 

[0045] ai^ijBi5»*«aiifcr*7u-A7-*-e 

(4. 7*f^7*y F«7— **fT5J«IW:^^-y h^tl: 
*5^T*S*ftTt*3 I P7 FUXIc*-3^T£»iSft 



(10) ^2 00 3-2 8 3 5 5 4 

/<? 

^ I i:gt)tt><Ott5o £7c, SffTCl P7FW^ 
(s, d) fcSt)tfeOfct5o £/=> ilfl^BOT^ 

[0 0 4 6] *7U-A7-^m ±ffi#5£<D=L-+f 

F7-**ftw**fi*fca«a« (y-F) tc 

A= { (s, d) e [ (Ox I ) U ( I xo) ] Is* 

d} 

fecn-L—*f{cm-?Z>T5^^ — F(4. Sf5=L-1ftf 
Br^tSiTO I P7 FUX<Ol^-rtl^*a«7ESfett 

[0 0 4 7] SRa- FKBt-SnfflOT^-r-rT/n — 
Ftfi&SiififfSB (y-F) (C*S*fl^nTt^t#. i 
#g (l<i<n) ^)7^f^7^- F(4. iH^C 

(1) (C (i) ca) IcBTS'^y F^+i-T^-v 

Tx 7>f-r7*y ^*fTa*tt. c (1) Uc 

(2) U Uc(n) asa«*03H«5T* 

50 ^/^7h (s, d) (CcfcoTi^Kl^tl^tOTfet). 

C^^WyhS rTfr-*?'**? FJ fcPf-EC 

[0 0 4 8] Bl 1 fc^LfclfciMft-r— 

fSiSSW 0 2 2(C§Bie^tlTl^$5^7 L -7;UO-CT 

[0 0 4 9] Hi 2 ICtt.T & 5 te3g?cT— 7;K4. 
(Type) t^7FbX (Destination) tmm 
40 tzTVIsTs (Source) ^ifciMft (Send to) ©SSB* 

^-f7*at)-rfe<D1?fe5. rr^-r^y (Active) J 
$>£i/M4 (Regular) J Ol^-f n*>Offl*i:5o 

^TfeTFUXfe^^flTcr FUX<OXi@t4. $c3M»^< 
W7h«I P7 7 FUXfecfctfiMflTC 1 P7KU 
Xtftlfn^tStOT^^o E?M?c<DJS§(4(4. 
FUX^iMflTtiT 7 FUXcO^^^^-y^L/c 

50 £>OT'££o 
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[0050] $>(*?<omft rr^f-^yj tfesx> v 
co^isiacoy k ux*}g&T& tors o . *<Dtea§ 

^^gtc^^iM^Oilfl^S^ I P T KbX^tl 
[0 0 51] Bl 2 frC^-T$Ej£?c-r— ^";KDWJ(C*5t^ 
SO, *B5fcTKUX*< Ti. 2. 3. 4 J -C&tK Sfs 

x# ri. 2. 3. 4 j tc^-y^-r^if^tcti, is^-r 
y# rr^-r^rj t*$>9. »5trKi/x^ ri o. 5 

0. 0. 0J T'feD, ii§7c7KU7^ ri 1. 12. 
13. 1 4J T*3d0, (Eaijfc** rr^f^7n-KBj 

h* h 'J LT7*f h 7-* 

e» 7>f^73-FB #*fr s n * 
ct*«bLT^5o gs3©xyhu--e«s * 

(MT'Ut>) J T-feD, 3i«7c7KUX# Ti 5 7. 

2. 3. oj x*tbK>, mM9ttf rr^-r-r^n-Hcj 

XT'SoTt, 3llfi7c7 KUXtf r 1 5 7. 2. 3. 
[0 0 5 2] Hi 1 2tC^T ^"5 tC, ftoaMJfe-r— ^ 

[0 0 5 3] W±KTOLfeji«««<D«l«**i:«>So 
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SftfcBSlC SlSSffl'^-y hO£flK;7 Kl/Xt/cti 
v # 7 i — x fflic ift-r £ £ fe tc. fiaiElgaijte-r— tc 

To 

[0054] ^ic. ^Mmmmic^f^T^r-^^zj- 

£\ 7^f-<7'3-K^#iCit)W7 hcD^td 

[0 0 5 5] HI 1 3 &y ±lBO-fe4-ay-r-f ^r;l/fc* 

JO I, 7 0 6 1 teggllJi (Certification Authority ) 

^nSfeOTSott&^U SSl^fil SP (Intern 
et Service Provider, >T >^-^^y hS^-tfXffi fft 

El 1 3JCit«-CW:, a-fB*gl7 0 5 1 (O I 
F7FUX(i Ti. 2. 3. 4 J T*«So UTTfi. n. 
— IfAtf, 7^f^73-FA«:IS8l7 0 0 1 JcI 

o o i tcas-r^fetoTfeai/^o 

[0 0 5 6] (1) Vtt^vlC. 3.-+f AOa- 

iffiS*«B7 o 5 i /iJaSffi^r^i/^TgicD^r-r^ 

to-6^B«ttfc»!Ettfc*ta"r«o fit (2) T'tTVT 
a-f^l7 0 5 1 ti, ±"eSfe«*nfc» 
Mft«retEJBttB7 0 6 l ClStSo c^^t, ISIE 
7 0 6 Hi. »fflg5KSB 7 0 5 1 tO I P 7 K 
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1fSS*^H7 0 5 1 <D I P7 KL"X r 1 . 2. 3. 4 J 
tfBtt»«B7 0 6 1 tClHIf^n^o 
[0 0 5 7] (3) T'ijrf £?tC. a— »«B*aiB 

7 o 5 Hi. ±-e^^tifc^^fflv^rr^5 L ^7* 

n-FAfca^S-r^ffla^rfT^o fit (4) 
lT£5lc, OL-iflH5|caHB7 0 5 l it, IBWBTB** 
n/c7^7 L ^y3-FA^iifl^7 0 0 1 icssts 

[0 0 5 8] Ctt*r««-T«««B7 0 0 Hi. (5) 

£^C> 7 ^ f ^ 7a - K A OSS^Ito /ta- /0 
If AOm?iEW»£12SEJra«B7 0 6 1 35p&*»-r*o 
c©W?SHB»fc:ti\ n.-+f A*»9J-rsill«4:. *-<D 
1 Tl. 2. 3. 4J ±C0 (2) icfel^ 

(6) T*^TJ:^^> 3i(f^B7 0 0 Hi. Jilfiom^ 

ffiw»^6ffiomLfcJL--'»fA04ira>i*ra^r, ±© 

(4) l*:^TaKnfc7ff^73-KAOtf* 

[0 0 5 9] &:fc. CO (1) *5<fcl/ (2) OfiEy^ft 
totlT— fi^.— *f AO^Hfl|A f SSEJattH7 0 6 1ICI 

asnsfc, ri— *fv&m#m7 o 5 1 tt*o^iw«*c*r 
^iifigH7 0 0 1 fc»a-r«ci:fepr*i-pfeSo 

[0 0 6 0] ilfsSB7 0 0 1 UfiSflS (H^ 

5BU SK^-1fOl| : FffiBB»*ffiSEa*B^6S« 

- >OU K L > c co*K*^Hfc L fc«*lc ti £ 
[0 0 6 1] ftio, L /ciffifl^H-xcor * -r ^ 

zM&vi&tisi&a mKommtLT, 3L-iftfE<Dm 

— F) tcT'^^^m-F^SSg-rtitf.fcl^jb^^S 
[0 0 6 2] #lc, ^BOlBifl<DfcAOffl»lco^T»i 50 



fiFBB 2003-283554 
22 

f-<73-KtfaSStlTtet), i #@ ( 1 < i <n) 

(l < j <n) ©7^r-<7a-K^ ^n^' 
tiifi^c (i) (c (i) c A ) ^*^rc (j) (c 

(j) ca) Icm-fZ't'rv bfctt?%t><D?&Z>£fe 
mztir^ztz. «*(c (I) flc (J)) finite 
&"eiifto>J:5S: i *3<fct/ j <Dffl#^-£ OIL i * j ) 

iBOTi'f^^a- Flc*> j #l07^f-f73-F 

[oo6 3] m i o*/ioiw}ri<o^U3i-*±, >^r^ f 

(s, d) ICBIILT, 

(s60 ( k ) AdeO (1) ) A ( k 1 ) 
(s, d) 6c (i) He (j) 

ttez>m^cm'tz>$><DThz>o iu o (k) $s&zf 

0 (1) te, ^n^tia.— "♦fkfc'Jctf HCcfcoTBfT^^ 
tlS I P7Kl/XO*&T65o o£ Dx F 

S^tiTfet). *<0J;5aai««B*j:co/^y F 
(s. d) #a»Lfc»*-t?**o CcOct^^t^tc 

[0 0 6 4] O^D, eiMJfe-r— 7;UtcSS^tlTl/^ 
— ViC, jMilTtTFU^cO^^Jg^^tlTt^T^ 

^7 F UXO^^fH^^ tiTi/^TjMff 7t:T Kl/X 

aMsrefc «fc i/ ^ ^ nr ^ s m 2 ox > f u - 1 s n 

> FU-£0£Sff2Ox>HJ-^fi^2-£T. 
2c0x>hU~O^^-->tC^j^r^7 B n^^A^r, : gi/j 

[0 0 6 5] c<D£?\c^ j£mft<D=L— ^(oy^v-^y 

=2- Fcfc 0 t^Oa-fC)7^f^^- F*B5t$ 

DoS (MSDoS, Distributed Denial of Servic 

e ) a»*B6W-r*^*-Xix*«air«»d»cWK:B 
-^^^^o ^0<£dtciT3C^cJ;oT, ^co^l— if 

[0 0 6 6] a2O*B<0*}BO^U*tt. fe^^^ 
*y F Cs, d) ^BBUraffl^tiS^ 2 0iX±OT^> 
t- ^ 7" =f — F Wffl— 0}zL—*f\c X o T^ii^ tlT 1 ^ it 

7 r ^-r^^-Fo-5"6o»fe*<aii$nfct<D^ 
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[0 0 6 7] ^tc. cn^rncii-crc^^^T^-r^y 

**yh7-^<7)/-K£LT ffi^-T 3 Sfl^StfM > 7 

i n u x±(D J a v a (gilrgjfj Sa^v-V (J V 
M) ^Jlj^TT^T^TV^y h <Dmm&ft? ilBflSEt 

^^PU (process) <D—*&t LXffim LTt^o Ctllc 

XvICLT^&o S/ts Ctl(Cf¥V\ £ — (kerne 
tt*;l/-7^>^^jg14{bLT^* 0 fit, SMI/* 

^ y hontr-^-r— *y>*a5»^6ffj«*n, -eco 

/*try h^7^77 »J 1 i b p c a p^rilLT Java 
[0 0 6 9] MFJO-gr^LTmmL/cW}l3cDI FX* 
T'Offi^O^SlC^-y^-r* I ($B3t I P7 

•y h^tOjffi^O^^r y Mi* A-iM/fclfctt* I PX 

W\ 5^75U l i b n e t £rffl LT^Hm^ ft5 0 

s^n^asfiTEr fux^. Tc^coiMfi^TFuxog; 

[0 0 7 0] Sfc, mmcO J a v a (SSi&fiO (DAP 
I (77U^3yyP«^>^7x-X) T*& 
3 rjava. security J ^rftH^SC tic J;oT-tr^^ U -r 

91§Ort:#>OJBi££ LT(i rx. 5 0 9 J SH8*fl&3* 

I P7KUX^ Tx. 5 0 9J (DN, distin 

guished name) C fclc <fc <K *HflfiJBffi 

[0 0 7 1] fcfc, I5^T^^:<, ±IE^>7'J^> 
■r— > b >V it a > tf - * i/X f A«:JfJ 1^3 C £ lc J; 



(13) ^2 0 0 3-2 8 3 5 5 4 

*«SSLT^S e fit, ±i£Lfc-a<OSQ.a, Tfcfr 

^•y hcoteiMojafi^. tzt^zt^v Yv-zmnm 

[0 0 7 2] fcfc. ±5$Lfc^3!>tf JL -^7n^^A 

ROM. C D-ROM^OpJ^f*. nvtfn — ^->X 
-<>£ — **y h3?<D*-y h»7 — ^ ^ttBSlS^FO 

tt^ty (RAM) -SB$PI7p^7L^« 

[0 0 7 3] &tc, ±HB7D^A^. l07o^ 7 A 
«rf »*ft L a > t: 0 a - ^ 5> X x Afr 6 . £ 

[0 0 7 4] $^ ±E7o^5i*tt, «fifiLfc««l<D 

(i^a^W T'SottfiK 
[0 0 7 5] TWoy-hiDI«aEKfr6±»[OiiB 

[0 0 7 6] ^fc. y-h«Biatfilfll*B«4y-h9 

^7h mmmo . ^^7x -x^^is^ ^ . 

[0 0 7 7] tl±, 0ffi«:#paLTCL (056^(0^^ 
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[0 0 7 8] 

h7t^ cosn y * f - * £ 
•7-*<oiB»*a«r*c4:*<prffii:aso fir, * 

•y h7-*±©*ft^tt<Djfllfi*Btt, &SS«h9fc: 
•y £1231 L T v b fc^T ZZ£lc&t)i$im 

i\>ry b(Dfr%micmm?%c£tf^mc%:2>rctb, je 
fifties nsnrflga*(g<-r«i:i:fen:. asseEica 

^DDo Sft*Oilfl/^y h«St§Ci:W7 

[0 0 7 9] *-y h^ — ^tO^iiflSBteDDo 

ifliftrrscfc-e. ftjfllfllttB»tt%S*A^flH£L^jESl 
3.— tf tOiifl h 5 1: -y ^ O£jiV«(0Mn«:lKM-r £ C 
^^RlffitC^So f^T, DD o SgCftoiBfl'*5r'V h 

-*S8*LT. **y hV-^±^IE^?tJffl#Oh5ll^ 
[0 0 8 0] Sfc, HAtf>r>^- *>y h<D<fc?lc. * 

ftT * -y b "7 - * fliijco^tc ct o T @ iBft ft tcffiffltt 
«6^iBI!lSnifc**IW<'c:4:^T*S<l:'3U:ftSo 

[0 1 ] *3f89J<0--*|(S<DJBI»«:aiTJ-e*S^y h7 
[0 3] |Rj*JSOJB!»K:J;«jE«ftftO»3£<0«T» 

[as] ra*«oje«*cj:*y-ha6iH2 ooim 

ilflSB 2002 — 2006 tfiffiz- *»«M»*-r7l/T? 

^>o 

[B6] ^mmiPMc<kz>y^)i$ 2021 tc^t* 



(14) 45Bfl 2003-283554 

[0 7 ] I^Sfi <Dfl5!® lc J:5y-hai2 0 0 l(OS 

[0 8 ] IQUjfiilOi&fftlC «£ ^ilflSS 2 0 0 2. 2 0 

[09] ranfiseDjBagtcksy— hSB2 0 0 1 

ilff SB 2002-2006 WjE h 5 t y ^&ttJB$<D 

/0 [0 10] |nl^Off$^^TT'^^r^^^^»y 
h7-^#H5JI£t-£*-y h"7-*4D«j£T*&* 0 
[011] IH^fiiO Jg® *HfirT* # £ T ^7 ^ y 

bv-?iz&%mmmwft{$mt&*^?7a y tmr* 

[0 12] m^m<OB*&*t&TT*^&TtT4 7*v 
bV-<?\c&Z> VESktt— 7/UKtt»K:lEtBS nti^ 
?s31^7^-7 r ;bO--^J^^;-r«0S0T^^o 

[013] mmmmm^mnr^^T^^^r^y 

20 3ffla©#«*3S-r«fl»BT***o 

[0 1 4] R^ffiBO^i^^TTt 7 ^ f 7^ 7 
h y -^7CQii{f Linux ±co Java (S&ffif 

HO (gSi^v-V (JVM) ^JM^Tr^T^TV^y h 



2 


0 0 0 




2 


0 0 1 


"f-brnm 


2 


0 0 2 


~2 0 0 6-iidSB 


2 


0 0 7 


-201 o-tf*SB 


2 


0 2 1 


-:7^;l/£ 


2 


0 2 2 




2 


0 2 3 




2 


0 2 4 




2 


0 2 5 




2 


0 2 6 


■ -Sli^x 


2 


0 2 7 




7 


0 0 0 




7 


0 0 1 


— aMISEB 


7 


0 1 0 




7 


0 1 1 




7 


0 1 2 




7 


0 2 1 




7 


0 2 2 




7 


0 2 3 


a, 7 0 2 3 b- -0*7 x— XgH 


7 


0 2 4 


a> 7 0 2 4 b - iffifSSSi 


7 


0 5 1 


■■•i-1fB5fcBB 


7 


0 6 1 


-BKUftttB 
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(15) 



2003-283554 



2007 



2008 



2009 



2D10 




CH3] 



LAN 







1 


{Src-172. 16. 10.0/Z4) 


2 


{TQS=Oi0l> 



2000 



ODoS # J*** 



[02] 



[0 7] 











1 


(Dst-192. 168. 1. 1/32.Prolacol=TCP.Port=80} 


500Kbps 


10 & 


2 


{D*t=132. 168.1. 2/3Z,Prolocol=UDP> 


300Kbps 


10 » 


3 


(Dst=192. 168. 1.0/24) 


IMbDS 


20 0 



[H4] 







1 


T1 Kbps U±4>/t4ry h/>< S! #U J:«»2&153ftTOS 


2 


T2 Kbps UJtO ICHP/Echo Reply /t<ry ha*S2 #JU±aSa§{S<*n-Cl>* 


3 


T3 Kbps U±(D7^^»M^ryhai S3 #U±ffi|fci£teS hTU5 



S3012 



S3013 



S3014 



CH 6] 



^33002 




S3C05 



S3C07 
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(16) 



2003-283554 



Ms] 



H8] 



r?n?i , 




rate 



— S3021 



-S3022 



--S3023 



-S3024 



CHI 9] 



[mi o] 





MJft 












1 






1 











S3031 



S3032 



S3033 



7000 










7000 \ 


7001 








atssn 








7000 












7001 
















cmii] 



7024d 



(Active Network Execution Envtronment) 



7010 



7021 



7011 



7023d'' 



7012 



i 7022 

7023 



. ^ 7023b 



7023c 



7001 



7024s 



7024b 



^ 7024c 
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¥fffl 2003-283554 



[0 12] 



v 



(Type) 


SBFEPKL-;* 
(Destination) 


(Source) 


(Send to) 


(Active) 


1.Z3.4 


Any 


P^^-r^D-KA 




10.50.0.0 


11.1Z13.14 






Arty 


157.2.3.0 




as 

(Regular) 


1 .2.0.0 


N/A 


29.15.20.1 




11.20.0.0 


N/A 


109.1.1.10 




199.1.1.0 


N/A 


120.0.0.1 











[H 1 3] 



<2) iiW18£©S 



{Certification Authority) 
(ISPtfSKIIScDtRSSS 



wag 



PC^-r^n-FA 
CI P12.3.45fl?5 



(4) afSHBCPC? 

gn 



(5) a^ sgaissBg^ 



I P : 1.2.3.4 



^W8 



3 



7051 : ZL-+fK;*gS (ZL-tfA) 
I P 12.3.4 



7001 : a©2B 



[HI 4] 




&Sg (process) 



(kernel) 



(CODV Of inGOTTlBTQ 



disable routine 
(IpJorward-O) 



IVrv ! | .eS*3S5l | ! T*-£y V£ i I 

(packet capture)^* -~\ (data link) ? | 



(incomina packets) 



(outooina packets) 
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(18) #M2 003-283554 

(72)52W# S± {Z F£-A(##) 5K030 GA13 GA15 HA08 HB14 KA06 

MMfRff^fflE^WT— TB 3# 1 # B KX24 KX30 LC15 

*W«WS*S»ttrt 5K033 AA05 AA08 CB06 CB08 DA16 

0B19 0B20 EC03 
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